CVE-2019-18827: Barco Clickshare Cs-100 Firmware

Medium severity, CVSS 5.9. EPSS: 1.4% chance of exploitation in the next 30 days.

On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware.

Affected products

• Barco Clickshare Cs-100 Firmware: before 1.9.0 (fixed in 1.9.0)
• Barco Clickshare Cse-200+ Firmware: before 1.9.0 (fixed in 1.9.0)
• Barco Clickshare Cse-200 Firmware: before 1.9.0 (fixed in 1.9.0)
• Barco Clickshare Cse-800 Firmware: before 1.9.0 (fixed in 1.9.0)

Published 2019-12-16. Last modified 2026-06-17.